Configuration Management -- Notification

Use the Notification page of the Configuration Management tab to configure e-mail server host name and e-mail templates for automatic notifications. You can also use this page to enable administrator alerts, schedule timed jobs to automatically generate CRLs (Certificate Revocation Lists), and to synchronize Oracle Certificate Authority with the directory.

Notifications are sent to users after Certificate Authority processing events, such as certificate requests, revocations, or renewals. Alerts are sent to administrators for events like CRL generation failure, or when the pending request queue size is greater than the specified threshold.

You can configure the following parameters:

Mail Details

Use this region to specify your outgoing e-mail (SMTP) server host name, the administrator's name and e-mail address to display on notification e-mails, and the e-mail address to which administrator alerts should be sent. You can also enable secure MIME protocol use and e-mail message body templates, which the Oracle Certificate Authority Administrator's Guide explains how to set up.

Note: The e-mails sent by Oracle Certificate Authority are signed using the server's S/MIME wallet, which is stored in ORACLE_HOME/oca/wallet/smime.

Alerts

Note: to enable alerts, Mail Details information must be specified. Use this region to enable administrator alerts as follows:

• Check Enable Alerts to send administrator alerts. If you check this box, then administrator alerts are sent for certificate processing events only. To enable other types of alerts, you must check this box and one or both of the following.

• Check Pending Requests Queue over Threshold to send administrator alerts when the request queue reaches the size specified in Queue Size Threshold. When you enable this alert, you can specify how often the server checks the queue size by entering the number of days and choosing the number of hours and minutes in the Interval Between Queue Size Checks fields.

• Check Enable CRL Auto Generation Failure to send administrator alerts when automatic CRL generation fails.

Scheduled Jobs

Use this region to schedule timed automatic jobs as follows:

• Check Enable Automatic Generation of CRL and specify how often CRLs are generated by entering the number of days and choosing the number of hours and minutes for CRL Auto Generation Interval fields. Enter the number of days automatically generated CRLs are valid in the CRL Auto Generation Validity field.

• Check Synchronize Directory to enable automatic synchronization with the directory at the interval you specify in the Synchronize Directory Interval fields. Synchronizing with the directory deletes all expired certificates from, and publishes all certificates and CRLs to the directory, which may have failed due to system error, such as the directory being temporarily unavailable.

The buttons at the bottom of the page perform the functions described in the following table: